This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KYXMQ9gGohtjMwIZ62OLsbpJroA.cer File: KYXMQ9gGohtjMwIZ62OLsbpJroA.cer (raw, json) Hash identifier: WLP2mfoxwSgaJ89CmGgbjG4nHv6Qlbc7KffMM4Zj9Bk= Subject key identifier: 29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECE86FA28F97839EE4CED3CF00664E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43226 AS: 60797 AS: 208502 AS: 210200 AS: 213393 IP: 2.57.184.0/22 IP: 45.80.64.0/22 IP: 77.95.128.0/21 IP: 87.242.76.0/22 IP: 92.242.40.0/24 IP: 92.242.44.0/23 IP: 92.242.56.0/22 IP: 95.181.198.0/24 IP: 185.15.172.0/22 IP: 185.27.160.0/22 IP: 185.98.86.0/23 IP: 185.128.84.0/22 IP: 185.129.204.0/22 IP: 185.133.0.0/22 IP: 185.152.184.0/22 IP: 193.228.108.0/22 IP: 217.150.194.0 -- 217.150.197.255 IP: 217.150.204.0/24 IP: 217.150.207.0/24 IP: 2a00:1b68::/32 IP: 2a00:9720::/32 IP: 2a03:99e0::/32 IP: 2a03:9ca0::/32 IP: 2a03:a2a0::/32 IP: 2a07:8340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:e8:6f:a2:8f:97:83:9e:e4:ce:d3:cf:00:66:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2985cc43d806a21b63330219eb638bb1ba49ae80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:64:a4:40:87:65:ef:37:a2:08:91:c6:76:a2: 9a:de:7e:91:79:22:dc:5c:49:c4:21:7a:69:a4:4b: dc:41:42:f4:6a:09:82:7a:b9:7c:26:aa:8a:53:e8: 07:a2:2d:29:90:2a:e1:c0:3c:35:e8:c3:20:ab:33: 42:11:d4:c3:cf:8d:4e:9e:e2:a6:a0:c2:5d:88:9f: 6e:06:6c:3f:32:26:56:51:41:ad:bb:23:e5:dd:29: 81:22:76:e7:af:3f:b6:9c:37:37:2e:95:8d:2e:85: 4a:26:e7:a7:89:59:b3:ae:2c:35:5c:8c:e1:c9:a1: 49:85:8d:ae:2a:cf:27:fb:0c:fb:fb:35:be:6d:34: b3:e9:0a:38:a8:20:ef:8e:e1:a8:4d:54:e9:59:40: d4:a6:a4:5d:6f:38:56:c8:8f:1d:5d:c2:9d:ad:fb: a5:51:04:29:a0:35:e9:45:2e:23:49:0a:ea:f5:2a: 60:76:98:0e:da:d0:1d:ad:32:9b:ec:0c:1d:e0:a5: 9e:55:5c:76:a6:71:9f:fc:9a:d0:d2:d7:6a:fe:04: 19:e5:65:90:23:ab:94:99:20:bb:66:96:ea:00:bf: 30:37:81:a0:1f:4b:94:46:cc:fe:48:49:d5:21:9b: 73:3e:18:93:16:a7:ec:eb:f1:92:8e:45:99:49:24: 11:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:85:CC:43:D8:06:A2:1B:63:33:02:19:EB:63:8B:B1:BA:49:AE:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/f3fef4-45da-4b43-98c2-4df8840efb17/1/KYXMQ9gGohtjMwIZ62OLsbpJroA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.184.0/22 45.80.64.0/22 77.95.128.0/21 87.242.76.0/22 92.242.40.0/24 92.242.44.0/23 92.242.56.0/22 95.181.198.0/24 185.15.172.0/22 185.27.160.0/22 185.98.86.0/23 185.128.84.0/22 185.129.204.0/22 185.133.0.0/22 185.152.184.0/22 193.228.108.0/22 217.150.194.0-217.150.197.255 217.150.204.0/24 217.150.207.0/24 IPv6: 2a00:1b68::/32 2a00:9720::/32 2a03:99e0::/32 2a03:9ca0::/32 2a03:a2a0::/32 2a07:8340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43226 60797 208502 210200 213393 Signature Algorithm: sha256WithRSAEncryption 9e:e4:58:c5:a5:fd:64:e2:c7:e3:cd:55:69:48:64:5b:9e:4d: 73:1e:75:1b:98:05:8e:df:d8:7e:4a:02:85:0a:24:1d:6c:0e: 50:66:13:9c:88:a9:8f:0e:f9:1b:f3:ee:78:7c:99:3c:61:c0: 06:50:a5:0d:00:69:d7:e3:49:48:a7:d1:a2:b3:e0:c6:4e:42: d2:92:7b:6b:94:0e:65:b9:19:81:e2:bc:31:5e:de:64:b2:83: c3:42:e4:b8:0f:d0:d8:cb:b7:b4:5d:9b:ae:fd:8d:6f:ad:eb: 4e:c4:f0:86:d8:65:ea:b0:9f:14:fc:f1:ac:1c:e1:46:8e:fc: 79:72:ee:f0:37:cf:43:50:6e:39:ab:bf:69:7a:a2:3f:da:c1: e5:95:9e:d8:65:8e:53:62:c7:fb:9b:1e:51:8c:6b:c1:28:20: 0a:76:21:86:36:c8:e6:d6:58:1a:12:0d:ee:d0:86:fc:5a:ba: 17:25:5d:dd:28:da:28:6b:3c:77:50:d5:e9:3e:a0:cb:e1:fe: 4b:73:c7:f1:5f:6a:49:89:cd:52:78:4f:11:61:f9:67:8d:1d: 8c:1e:e8:47:65:14:61:18:38:9a:67:63:62:36:2f:de:c2:5a: 84:1f:ea:3d:4e:b2:a3:dd:60:1e:e3:58:fb:df:0e:87:ea:08: 0f:54:78:9a -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISAZt57Ohvoo+Xg57kztPPAGZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTg1Y2M0M2Q4MDZhMjFiNjMzMzAyMTllYjYzOGJiMWJhNDlhZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumSkQIdl7zeiCJHGdqKa3n6ReSLc XEnEIXpppEvcQUL0agmCerl8JqqKU+gHoi0pkCrhwDw16MMgqzNCEdTDz41OnuKm oMJdiJ9uBmw/MiZWUUGtuyPl3SmBInbnrz+2nDc3LpWNLoVKJueniVmzriw1XIzh yaFJhY2uKs8n+wz7+zW+bTSz6Qo4qCDvjuGoTVTpWUDUpqRdbzhWyI8dXcKdrful UQQpoDXpRS4jSQrq9SpgdpgO2tAdrTKb7Awd4KWeVVx2pnGf/JrQ0tdq/gQZ5WWQ I6uUmSC7ZpbqAL8wN4GgH0uURsz+SEnVIZtzPhiTFqfs6/GSjkWZSSQRHwIDAQAB o4IDXjCCA1owHQYDVR0OBBYEFCmFzEPYBqIbYzMCGetji7G6Sa6AMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2YzZmVm NC00NWRhLTRiNDMtOThjMi00ZGY4ODQwZWZiMTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvZjNmZWY0 LTQ1ZGEtNGI0My05OGMyLTRkZjg4NDBlZmIxNy8xL0tZWE1ROWdHb2h0ak13SVo2 Mk9Mc2JwSnJvQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHIBggrBgEF BQcBBwEB/wSBuDCBtTCBgAQCAAEwegMEAgI5uAMEAi1QQAMEA01fgAMEAlfyTAME AFzyKAMEAVzyLAMEAlzyOAMEAF+1xgMEArkPrAMEArkboAMEAbliVgMEArmAVAME ArmBzAMEArmFAAMEArmYuAMEAsHkbDAMAwQB2ZbCAwQB2ZbEAwQA2ZbMAwQA2ZbP MDAEAgACMCoDBQAqABtoAwUAKgCXIAMFACoDmeADBQAqA5ygAwUAKgOioAMFAyoH g0AwLgYIKwYBBQUHAQgBAf8EHzAdoBswGQIDAKjaAgMA7X0CAwMudgIDAzUYAgMD QZEwDQYJKoZIhvcNAQELBQADggEBAJ7kWMWl/WTix+PNVWlIZFueTXMedRuYBY7f 2H5KAoUKJB1sDlBmE5yIqY8O+Rvz7nh8mTxhwAZQpQ0AadfjSUin0aKz4MZOQtKS e2uUDmW5GYHivDFe3mSyg8NC5LgP0NjLt7Rdm679jW+t607E8IbYZeqwnxT88awc 4UaO/Hly7vA3z0NQbjmrv2l6oj/aweWVnthljlNix/ubHlGMa8EoIAp2IYY2yObW WBoSDe7QhvxauhclXd0o2ihrPHdQ1ek+oMvh/ktzx/FfakmJzVJ4TxFh+WeNHYwe 6EdlFGEYOJpnY2I2L97CWoQf6j1OsqPdYB7jWPvfDofqCA9UeJo= -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:30 2026 by rpki-client